]> git.ipfire.org Git - thirdparty/openssl.git/commit
hmac-drbg: ignore any passed MAC parameter
authorPauli <paul.dale@oracle.com>
Tue, 28 Oct 2025 02:38:38 +0000 (13:38 +1100)
committerPauli <paul.dale@oracle.com>
Thu, 30 Oct 2025 22:35:11 +0000 (09:35 +1100)
commita5683b1d6ea637dc9f304faf5bb5190d28cf9a9c
treeb861ea47a86fee1f55271ab2c15b43f7e2d31fb7
parent96459b12aa094ea35c71263422d2f101ea724351
hmac-drbg: ignore any passed MAC parameter

The MAC parameter should only ever be set to HMAC.
Since setting it to anything else isn't defined, this parameter is ignored.

Fixes #29003

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/29012)
providers/implementations/include/prov/drbg.h
providers/implementations/rands/drbg_hmac.c
providers/implementations/rands/drbg_hmac.inc.in